Your privacy matters. This policy explains exactly what personal data pop77 collects, why we collect it, how we use it, who we share it with, and the rights you hold as an Indonesian player on our platform.
Last Updated: January 2026pop77 ("the Company", "we", "us", "our") operates the online sportsbook, live casino, and gaming platform accessible at pop77.net. We are committed to protecting the privacy and personal data of every individual who visits or registers an account on our platform.
This Privacy Policy ("Policy") sets out the basis on which we process personal data about you ("the User", "you", "your") in connection with your use of the pop77 Platform and Services. It applies to all personal data collected through our website, mobile web interface, customer support channels, and any other interaction you have with pop77.
By registering an account with pop77 or continuing to use our Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data in the manner described herein. If you do not agree with this Policy, please do not use the pop77 Platform.
This Policy should be read alongside our Terms & Conditions, which also govern your use of the pop77 Platform. In particular, the eligibility requirement that all Users must be resident in Indonesia and at least 21 years of age applies equally to this Policy.
For the purposes of this Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly — including name, national ID number, email address, IP address, and payment details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, organisation, use, disclosure, transfer, and deletion. |
| "Controller" | pop77 — the entity that determines the purposes and means of processing your Personal Data. |
| "Processor" | A third-party company that processes Personal Data on pop77's behalf and under pop77's documented instructions. |
| "KYC" | Know Your Customer — the identity and age verification process mandatory for all pop77 Users before their first withdrawal. |
| "Cookies" | Small text files placed on your device by the pop77 Platform to store session, preference, and analytics information. |
| "Platform" | The pop77 website (pop77.net), mobile web interface, and all software, games, and services accessible through them. |
pop77 collects the following categories of Personal Data about Users:
pop77 collects your Personal Data through the following channels:
pop77 processes your Personal Data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration & Identity Data |
| Age and identity verification (KYC) | KYC Data, Registration Data |
| Processing deposits and withdrawals | Financial & Transaction Data, KYC Data |
| Delivering and personalising gaming services | Usage & Behavioural Data, Technical Data |
| Fraud prevention and anti-money laundering | All categories as required |
| Responsible gaming monitoring and intervention | Usage & Behavioural Data, Financial Data |
| Customer support and dispute resolution | Communication Data, Account Data |
| Marketing communications (where consent given) | Registration Data, Behavioural Data |
| Legal compliance and regulatory reporting | All categories as required by law |
| Platform analytics and product improvement | Technical & Device Data, Usage Data (anonymised) |
pop77 processes your Personal Data on the following legal grounds:
pop77 does not sell your Personal Data to third parties. We share your data only in the following circumstances and only to the extent strictly necessary for each purpose:
pop77 retains your Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and KYC compliance obligations |
| KYC documents | Duration of account + 5 years post-closure | Regulatory and legal compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming history | 5 years from event date | Dispute resolution and compliance |
| Support communications | 3 years from resolution date | Quality assurance and dispute evidence |
| Marketing consent records | Until consent withdrawn + 1 year | Evidence of consent basis |
| Technical/device log data | 12 months on a rolling basis | Security monitoring and fraud detection |
After the applicable retention period has elapsed, Personal Data is securely deleted or permanently anonymised in a manner that makes re-identification impossible.
pop77 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
The pop77 Platform uses cookies and similar tracking technologies to deliver and improve its services. The cookies we use fall into the following categories:
You can control functional and analytics cookies through your browser settings. Note that disabling certain cookies may affect the performance or personalisation of your pop77 experience. pop77 does not use third-party advertising cookies or retargeting pixels.
As a User of the pop77 Platform, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact pop77 at [email protected] with your account username and a description of your request.
Request a copy of all Personal Data pop77 holds about you, together with information about how it is used.
Request correction of any inaccurate or incomplete Personal Data held in your pop77 account.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that pop77 temporarily stops processing your data while an accuracy dispute or objection is under review.
Object to processing carried out on the basis of legitimate interests, including direct marketing communications.
Request a machine-readable export of Personal Data you provided directly to pop77, where technically feasible.
pop77 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this by a further 30 days and will notify you accordingly. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
pop77 strictly prohibits the use of its Platform by any person under the age of 21. pop77 does not knowingly collect Personal Data from individuals under 21 years of age.
If pop77 discovers during the KYC process or at any other point that a User has registered while under the minimum age, the following steps will be taken immediately:
If you believe that a minor has registered an account at pop77 or has been given access to your account, please contact our support team immediately via Live Chat or at [email protected].
The pop77 Platform may contain references to third-party services, payment providers, or game studios. While pop77 selects its partners carefully, we are not responsible for the privacy practices of any third party operating outside the pop77.net domain.
When you interact with a third-party service — such as completing a payment via a BCA or OVO interface — that interaction is governed by the third party's own privacy policy. pop77 recommends reviewing the privacy policies of any third-party service you use in connection with your pop77 account.
pop77 primarily processes your Personal Data within its secure server infrastructure. Where data is transferred to or accessed by processors operating outside Indonesia — for example, game software providers headquartered in Europe or Malta — pop77 ensures that appropriate safeguards are in place before any transfer occurs.
These safeguards may include:
pop77 does not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without first implementing the safeguards described above.
pop77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, pop77 will notify registered Users by email to the address on file and by displaying a prominent notice on the Platform for a minimum of seven days prior to the revised Policy taking effect.
The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the pop77 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
For all questions, requests, or concerns relating to this Privacy Policy or the processing of your Personal Data by pop77, please contact our support team using any of the channels below. Our Indonesian-speaking agents are available 24/7 and are familiar with data rights requests.
When submitting a data rights request by email, please include your pop77 account username, the nature of your request, and a copy of a valid photo ID so that we can verify your identity before actioning the request. pop77 will not process data rights requests from unverified individuals.
Privacy at pop77 is not a checkbox — it is a core part of how we build and operate the platform. Here is what that looks like in practice.
Every byte of data exchanged between your browser and pop77's servers travels over an encrypted connection. Whether you are logging in from Jakarta or placing a bet from Bali, your session is protected end-to-end.
pop77 does not sell, rent, or trade your personal information to third-party advertisers or data brokers — ever. Marketing communications from pop77 are sent by us directly, only with your explicit prior consent, and you can opt out at any time.
We collect KYC documents because responsible gaming and anti-fraud compliance require it — not because we want more data. KYC files are stored in a segregated, encrypted environment and accessed only by authorised verification personnel.
You can request access to, correction of, or deletion of your personal data at any time. pop77 responds to all verified data rights requests within 30 days. You also control your marketing preferences and can withdraw consent instantly.
Every processor that handles your data on pop77's behalf — from KYC providers to game studios like Pragmatic Play and Evolution Gaming — operates under a written data processing agreement and is subject to regular compliance reviews by our team.
pop77 does not keep your data indefinitely. Retention periods are defined by category — from 12-month rolling logs for technical data to a 7-year statutory hold for transaction records — and data is securely deleted when the period expires.